CVE-2010-2677

PHP remote file inclusion vulnerability in mwplugin.php in Open Web Analytics OWA 1.2.3, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter. NOTE: some of these details are obtained from third party...

CVE-2010-2677

Open Web Analytics (OWA) 1.2.3 is affected by a PHP remote file inclusion due to mw_plugin.php, where enabling register_globals and disabling magic_quotes_gpc allows an attacker to execute arbitrary PHP code via a URL in the IP parameter. The root cause is improper handling of user input in the R...

Поиск уязвимостей в веб приложениях

В этой статье я собрал интересные на мой взгляд ошибки в php скриптах. Но для начала, описание некоторых параметров PHP-интерпретатора: Цитата: registerglobals = ON - все переменные регистрируются как глобальные; magicquotesgpc = ON - в массивах POST, GET, COOKIE экранируются кавычки и опасные...

CVE-2010-2618

CVE-2010-2618 describes a remote file inclusion (RFI) in AdaptCMS. The vulnerability is triggered in the PHP file inc/smarty/libs/init.php when register_globals is enabled, allowing an attacker to supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. Multiple connect...

AdaptCMS 2.0.0 Beta Remote File Inclusion

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- AdaptCMS...

AdaptCMS 2.0.0 Beta - init.php Remote File Inclusion

AdaptCMS 2.0.0 Beta - init.php Remote File Inclusion / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

AdaptCMS 2.0.0 Beta - 'init.php' Remote File Inclusion

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- AdaptCMS...

CVE-2010-2358

Nakid CMS is affected by a remote file inclusion vulnerability in the core[system_path] parameter for version 0.5.2. When magic_quotes_gpc is disabled and register_globals is enabled, an attacker could cause the execution of arbitrary PHP code via a crafted URL. This CVE is documented across mult...

CVE-2010-2314

The CVE-2010-2314 issue affects the NP_Twitter Plugin for Nucleus (versions 0.8 and 0.9). It is a PHP remote file inclusion vulnerability triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to the DIR_PLUGINS parameter. Root cause: loc...

CVE-2009-4887

PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binnincludepath cookie. NOTE: this can also be leveraged to include and execute arbitrary local files...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binnincludepath cookie. NOTE: this can also be leveraged to include and execute arbitrary local files...

CVE-2009-4887

PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binnincludepath cookie. NOTE: this can also be leveraged to include and execute arbitrary local files...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1978

PHP remote file inclusion vulnerability in defaulttheme.php in FreePHPBlogSoftware 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpincdir parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1945

Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 action.class.php, 2 architecte.class.php, 3 avis.class.php, 4 bible.class.php, and 5...

CVE-2010-1944

Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 autorisation.class.php, 2 courrierautorisation.class.php, 3 droit.class.php, 4...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 action.class.php, 2 architecte.class.php, 3 avis.class.php, 4 bible.class.php, and 5...

CVE-2010-1946

Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 autorisationnormale.class.php, 2 collectivite.class.php, 3 dossier.class.php, 4...

CVE-2010-1948

CVE-2010-1948 affects OpenMairie Openfoncier 2.00; vulnerable component: scr/soustab.php. The root cause is directory traversal via dsn[phptype] when register_globals is enabled, enabling remote inclusion/execution of arbitrary local files. This is a related issue to CVE-2007-2069. CVSSv2 base sc...

CVE-2010-1947

Summary: OpenMairie OpenRegistreCIL is affected by directory traversal/remote local file inclusion in the OpenRegistreCIL 1.02 component (and related OpenCatalog/OpenFONCI variants) via dsn[phptype], when register_globals is enabled. The issue allows including and executing arbitrary local files;...